This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier: 4ObIM2sNtuOyZK4uV3Obh6c74edRw8cVVhPSFrv5Lsg=
Subject key identifier: 0E:23:5F:0F:40:D6:7E:02:75:3B:69:AA:36:17:8F:5E:86:ED:93:EC
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number: 01C9
Signing time: Fri 05 Dec 2025 01:09:20 +0000
Manifest this update: Fri 05 Dec 2025 01:09:20 +0000
Manifest next update: Fri 12 Dec 2025 01:09:20 +0000
Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: 04sBM8nwBS4I0njQLnkaVo/xUcM0xBYSZ0+5CgXH7Vo=)
2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Validity
Not Before: Dec 5 01:09:20 2025 GMT
Not After : Dec 12 01:09:20 2025 GMT
Subject: CN=693230c0-53b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:19:e5:04:e6:3e:f0:c0:aa:e0:9a:23:ed:
99:e9:a5:5c:9c:af:07:cc:bb:44:9f:54:9f:6e:23:
a9:01:43:eb:8d:c7:f0:ba:96:42:34:a3:be:f2:5a:
e2:30:fa:50:09:63:98:1b:b4:ab:6d:64:4b:77:f2:
ca:41:e0:28:ea:67:1e:27:9c:04:d7:b2:7c:8e:bf:
c6:15:c6:d0:92:fe:e5:62:99:2d:70:06:c9:d8:dd:
05:0a:61:a7:16:1a:bc:54:59:8f:44:b8:69:1a:09:
57:9a:85:25:64:4e:44:3a:f8:09:be:50:ab:fa:5c:
27:ec:40:aa:ef:9d:5c:26:a8:6e:c8:e0:31:94:4a:
56:84:08:bc:6d:04:50:57:99:b0:d6:26:15:f4:26:
f3:ee:50:88:19:16:1f:22:8b:0c:28:71:d5:33:4c:
81:af:5a:c5:ef:90:d4:1a:eb:09:1e:63:ed:87:3b:
a8:f3:54:a2:0d:ef:78:86:02:9a:97:82:6b:bc:01:
23:bf:db:7e:dd:41:17:68:a8:eb:38:ee:7f:bf:1f:
b6:43:46:05:fb:6a:85:98:af:05:43:6a:d5:08:02:
ef:88:3f:ca:0e:7f:75:16:7c:2a:58:c2:22:9d:95:
b0:d7:32:ff:15:e5:cf:02:6d:bc:31:1b:b4:98:24:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:23:5F:0F:40:D6:7E:02:75:3B:69:AA:36:17:8F:5E:86:ED:93:EC
X509v3 Authority Key Identifier:
keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d5:d4:39:2a:6a:c8:51:42:f6:04:1f:26:2d:1b:57:9f:7b:
fd:5c:75:52:f9:31:2e:c2:ce:2e:40:ef:42:a3:45:5e:5a:7d:
0d:60:4c:51:d2:10:74:56:16:67:b5:a8:22:a1:b5:cd:94:69:
ff:d9:01:e3:f1:0e:c4:65:06:f7:04:f2:87:a7:52:14:76:f9:
4b:1e:3f:99:21:99:5d:64:21:3d:ce:9f:e8:4a:fc:c0:d3:29:
ed:20:5f:ba:3c:1e:9e:b3:51:43:29:9e:53:c7:3b:22:1e:3d:
e1:d1:b2:bd:62:3a:52:29:fc:c4:ec:23:d2:f4:e1:4c:70:0a:
16:b6:d6:82:dd:4d:ef:91:22:85:84:cf:80:fa:a3:14:4c:6b:
e4:7a:f3:5f:4a:4e:ab:92:77:26:c7:0a:46:ff:75:35:20:46:
71:3e:09:96:ab:a3:b4:c9:d2:b9:80:fd:16:e7:0a:7f:c9:33:
70:16:1f:1c:68:a5:af:dd:23:02:eb:5d:85:e4:cb:59:26:a5:
3d:65:73:ca:30:e3:7b:f7:7f:e0:77:01:c3:8a:51:84:89:bb:
1b:03:72:7f:d5:bb:07:95:f4:c1:a4:e5:74:83:e7:85:2e:fc:
3c:b8:27:a4:83:c9:ed:1a:c1:ee:93:ab:37:fb:39:62:2c:65:
53:2b:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:29 2025 by rpki-client